What happens to your data after deletion
Deleting your Overture account starts a clock. For 30 days your data is soft-deleted and recoverable on request. After that it is hard-deleted from our live database. Encrypted operational backups we hold for disaster recovery roll off within the following seven days. A small set of records (invoices, audit logs) is kept longer for legal reasons. Here's the full timeline.
The timeline at a glance
| When | What happens | Can it be undone? |
|---|---|---|
| Day 0 | You click "Delete account". Account is immediately signed out everywhere and marked deleted. | Yes — email support |
| Days 1–30 | Grace window. Your data is hidden from the app but still in our database with a deleted_at timestamp. | Yes — email support |
| Day 30 | Hard delete from the live database. Your user record, organizations you owned, events, sessions, rows, follow-ups, and uploaded files are all permanently removed. | No |
| Days 30–37 | Backup aging. Encrypted daily backups still contain your data but age out on a rolling seven-day window. Backups are used for disaster recovery only — not customer-restorable. | No (data not accessible) |
| Day 37+ | Fully gone from all backups. | — |
What actually gets deleted
- Your user account — email, name, hashed password, profile settings.
- Organizations you solely own — including all events, sessions, rows, follow-ups, and team membership records inside them.
- Files you uploaded — logos, cue card images, gallery photos.
- Your edits to organizations someone else owns — the org survives, but your authorship gets nulled out. The events you edited still exist; the audit log shows "[deleted user]".
- Email and notification subscriptions — you're removed from product update blasts and any other lists.
- Active sessions and login tokens — wiped immediately at day 0.
Co-owned organizations are different
If you co-own an organization with other people, deleting your account removes you but leaves the organization, its events, and its history intact for the remaining owners. To delete a shared organization itself, all owners need to remove it or transfer ownership first.
What we keep, and why
A small set of records is kept beyond the 30-day window — required by law, fraud prevention, or our own audit obligations:
- Invoices and payment records. Kept for seven years to satisfy tax and accounting law. These live in Stripe; we retain a reference and the invoice metadata, not your card number. Stripe stores card data per PCI rules.
- Security audit logs. Records of authentication events, admin actions, and security-relevant requests are kept for 12 months. Personal data inside them is minimized — typically just user ID and IP.
- Anonymized usage metrics. Aggregate counts (events created per month, average team size) survive deletion. They contain no identifying information about you.
- Suppression lists. Your email address may be retained on an internal "do-not-email" list so we don't accidentally mail you again after you've left. That entry contains only the email and a "suppressed" flag.
What about backups?
Overture's database is hosted on Supabase Pro, which captures encrypted daily backups on a rolling seven-day window. These backups exist for one reason only: disaster recovery if something catastrophic happens to the live database. They are not customer-restorable on a per-account basis.
After the day-30 hard delete in the live database, your data still exists in any daily backup captured before that date. Those backups roll off within seven days, so by day 37 from when you pressed delete, no copy of your data exists anywhere in our systems.
If we ever needed to restore a backup during that 30–37 day window, our restore procedure includes a re-deletion step for any account that was marked deleted in the live database. Your data does not reappear in the app.
Want to change your mind during the 30-day window?
Email [email protected] from the email address on your old account. We'll restore the soft-deleted account in one business day or less. After day 30, restoration is no longer possible.
Want to download your data first?
Export tools are coming. In the meantime, email [email protected] before you delete and we'll send you a JSON dump of your organizations, events, sessions, rows, and team within one business day. Once the account is hard-deleted at day 30, we cannot produce an export.
Just need to step away?
If you're not sure deletion is right, you can also just cancel your subscription — keep your account alive, stop paying. Your data stays put until you decide. See how to cancel or change your plan.
Want the legal version?
The retention rules above are spelled out in our Privacy Policy. This article is a plain-language summary.